Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q6gp-rjmw-h7qw

Опубликовано: 04 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE

EPSS

Процентиль: 81%
0.01611
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 3 лет назад

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE

CVSS3: 8.8
nvd
больше 3 лет назад

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE

EPSS

Процентиль: 81%
0.01611
Низкий

8.8 High

CVSS3

Дефекты

CWE-434